Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: mZxdsbKIWGrLYelQxBfJVxOr9G2hFVaM1hqYwm3VOx0=
Subject key identifier: 9D:24:B9:81:6C:C0:F5:27:60:F7:22:AE:57:82:B6:A7:C5:FD:50:84
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019A4D741666356953CF6FFA93E421495A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 05D7
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: 3rJ0cju2cmwjmos/ifbbSilbQUvlAyOtkLo87h4YQMc=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:16:66:35:69:53:cf:6f:fa:93:e4:21:49:5a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=9d24b9816cc0f52760f722ae5782b6a7c5fd5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:ab:53:61:1d:e7:86:b9:36:2f:73:d2:2c:
f8:84:d5:64:ca:42:37:a8:52:2b:77:4d:7e:b8:87:
c5:b6:40:b6:a4:9b:a6:41:07:b7:db:4a:9b:2a:f7:
43:21:5c:eb:ab:ba:d0:0a:05:34:69:e4:70:0f:66:
95:12:21:ad:88:4b:82:82:35:3a:44:76:cf:aa:9c:
b3:2a:fe:fa:7a:db:81:ba:8a:7d:3a:e3:9b:f8:03:
ac:0f:a7:19:bf:bb:31:04:d4:06:03:00:8c:39:ed:
47:10:6d:66:31:4a:ed:6b:1d:6d:5e:51:ce:1e:b1:
6c:71:4e:0c:aa:00:5e:54:f0:7e:63:ae:c2:bb:6e:
7d:ce:40:77:a7:49:c2:f7:0e:b7:3a:6d:14:a0:78:
7e:e1:d3:8c:32:42:ca:1b:5b:af:02:18:39:90:9b:
4a:cf:17:05:c8:f9:7b:27:4b:47:be:b7:51:f2:6a:
4c:b1:f0:b3:4c:42:53:5c:a1:3d:e9:0d:0a:5f:b6:
e6:cc:74:70:54:71:3c:b6:fa:7d:70:98:f4:57:68:
6a:50:35:70:ad:40:55:a2:4f:9d:63:1d:cf:d9:70:
6e:1b:16:e7:86:fc:4c:63:9d:80:57:41:5d:ba:15:
a8:f4:c3:e6:08:fc:53:83:e1:3b:d7:19:e6:bd:17:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:B9:81:6C:C0:F5:27:60:F7:22:AE:57:82:B6:A7:C5:FD:50:84
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b2:b0:25:c5:79:11:07:6d:a4:a5:1a:de:da:6e:91:01:7a:
40:1d:fa:4c:94:17:f3:e5:45:e5:2e:f6:32:cf:44:ea:4d:d8:
0a:65:18:2a:29:61:a3:bf:b3:0e:81:be:11:ba:6f:68:52:cd:
9a:1b:1a:b2:20:19:74:0c:9d:c7:03:a7:62:ed:b9:68:7b:cf:
1c:cc:4c:0e:06:1a:c9:b2:ea:1d:84:5b:3e:23:dd:77:e9:89:
5b:dd:e8:84:e2:bd:db:8b:a1:13:3d:c8:ef:76:75:e4:68:71:
92:3a:b2:c7:f6:64:19:74:8c:d7:38:28:fb:ca:2c:a4:0c:ce:
d6:f2:1b:1f:40:66:d1:26:b0:e9:ad:03:a2:02:12:87:8c:29:
00:8c:8c:74:89:8b:d6:43:b6:ba:32:62:b0:1c:ba:2e:b4:75:
c1:53:9f:f5:98:72:60:5a:35:aa:8d:07:52:7c:98:4d:87:48:
40:1b:98:d7:ca:ac:8b:df:38:79:9e:0b:83:ca:70:3e:77:d8:
b4:db:ed:e3:c6:16:f1:8c:83:0e:b0:39:9d:a1:30:1b:df:37:
13:8f:56:fe:21:79:69:1d:57:01:d1:ff:68:09:1a:8b:42:56:
b0:27:c6:79:85:4f:45:54:cf:a7:08:7c:62:73:23:b4:4b:d4:
ef:8e:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:02 2025 by rpki-client